The platform’s vulnerability related to ensuring security standards for XML Apache Santuario XML Security for Java allows attackers to trigger a service failure.

🗓️ 07 Nov 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

Xml Security for Java vulnerability leads to remote service failure via Dom Canonicalization method resource issue.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache XML Security for Java affects IBM Tivoli Business Service Manager (CVE-2013-4517, CVE-2013-2172, CVE-2009-0217, CVE-2021-40690)	6 Oct 202204:39	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Santuario (CVE-2013-4517)	2 Jul 201812:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Apache Santuario XML Security for Java (CVE-2013-4517, CVE-2013-2172)	14 Oct 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Santuario XML Security for Java affect IBM InfoSphere Information Server	14 Oct 202222:24	–	ibm
Broadcom	BSA-2017-471	17 Nov 201700:00	–	broadcom
Check Point Advisories	Apache Santuario XML Security for Java DTD Denial of Service (CVE-2013-4517)	13 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2013-4517	11 Jan 201401:00	–	cve
Cvelist	CVE-2013-4517	11 Jan 201401:00	–	cvelist
Debian CVE	CVE-2013-4517	11 Jan 201401:00	–	debiancve

Vulners

Node

OR

ibm tivoli_business_service_managerMatch6.2.0

apache santuario_xml_securityRange<1.5.6

Source	Link
santuario	www.santuario.apache.org/secadv.data/cve-2013-4517.txt.asc
lists	www.lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E
lists	www.lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E
ibm	www.ibm.com/support/pages/node/6826621
web	www.web.nvd.nist.gov/view/vuln/detail

07 Nov 2022 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 27.1

CVSS 37.5

EPSS0.08863

Xml Security Java Security Xml Signature Dom Canonicalization Resource Management Remote Service Failure